Security and resiliency aren't features. They're required.

Public agencies hold residents' data and process real money. RecreationHQ is built, from the ground up, to meet that responsibility, so your IT reviewer and your finance office can both say yes.

Isolated & encrypted by tenant

Your data stays separate. Each organization has its own dedicated data storage, with dedicated encryption keys available on qualifying paid plans. RecreationHQ is designed around strong tenant isolation and StateRAMP Moderate requirements to help keep your organization’s data protected and segregated.

PCI-compliant payments

Payment processing runs through a PCI-compliant provider. We never store full card numbers, and every transaction is traceable to the same ledger as registration.

Automatic disaster recovery

Your data is replicated to a second AWS region for automatic recovery. Backup and restore are included for every customer, at no extra charge, on every paid plan.

Role-based access & SSO

Granular roles and permissions keep staff in their lane, with SSO (SAML/OIDC) and domain controls available for larger agencies and enterprise.

Serverless, scales on its own

The platform scales up and down automatically, so registration morning, your single busiest hour, runs as smoothly as any other day.

Open, and never locked in

An open API and a custom domain you set up in a few clicks mean RecreationHQ fits your existing systems. Transparency beats lock-in, your data is always yours to export.

Detailed security documentation and a compliance summary are available to agencies under evaluation. Contact security@recreationhq.net.

Built for the people who can say no

Bring your IT reviewer. We'll pass.

Start with a cost-recovery audit, and we'll include the security and compliance summary your procurement team needs. Plans from $2.99/month.

Get my cost-recovery audit →